
Research
/Security News
Malicious npm Packages Target WhatsApp Developers with Remote Kill Switch
Two npm packages masquerading as WhatsApp developer libraries include a kill switch that deletes all files if the phone number isn’t whitelisted.
@plasmohq/storage
Advanced tools
Safely and securely store data and share them across your extension and websites
@plasmohq/storage
is an utility library from plasmo that abstract away the persistent storage API available to browser extension. It fallbacks to localstorage in context where the extension storage API is not available, allowing for state sync between popup - options - contents - background.
This library will enable the
storage
permission automatically if used with the Plasmo framework
Visit: https://docs.plasmo.com/framework/storage
To use the storage API on Firefox during development you need to add an addon ID to your manifest, otherwise, you will get this error:
Error: The storage API will not work with a temporary addon ID. Please add an explicit addon ID to your manifest. For more information see https://mzl.la/3lPk1aE.
To add an addon ID to your manifest, add this to your package.json:
"manifest": {
"browser_specific_settings": {
"gecko": {
"id": "your-id@example.com"
}
}
}
During development, you may use any ID. If you have published your extension, you can use the ID assigned by Mozilla Addons.
To boldly go where no one has gone before
FAQs
Safely and securely store data and share them across your extension and websites
The npm package @plasmohq/storage receives a total of 63,657 weekly downloads. As such, @plasmohq/storage popularity was classified as popular.
We found that @plasmohq/storage demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 2 open source maintainers collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Research
/Security News
Two npm packages masquerading as WhatsApp developer libraries include a kill switch that deletes all files if the phone number isn’t whitelisted.
Research
/Security News
Socket uncovered 11 malicious Go packages using obfuscated loaders to fetch and execute second-stage payloads via C2 domains.
Security News
TC39 advances 11 JavaScript proposals, with two moving to Stage 4, bringing better math, binary APIs, and more features one step closer to the ECMAScript spec.